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Security sy s tem SECURITY SYSTEM INCLUDING IDENTIFICATION 
TRACKING USING RF TRANSPONDERS 



FIELD OF THE INVENTION 



[0001] This invention relates to a security system and more particularly to a security 
management system for facilitating personnel identification and tracking within a secure 
area. 



[0002] Conventional security management systems furnish a secure area with a network 
of transponder readers operable to interrogate transponders within their range and obtain 
from the transponders a unique identifier associated therewith. Users carry uniquely 
encoded transponders within the secure area. 

[0003] Such security systems are inflexible and require a complex infrastructure in which 
security verification systems are incorporated within each transponder reader. One major 
drawback of such systems is that a stolen transponder can be used within the secure area 
and does not register as being stolen. Transponders are deemed valid until the unique 
transponder code is cancelled. 

SUMMARY OF THE INVENTION 
[0004] It is an object of the present invention to seek to provide a flexible security 
management solution requiring a minimum of system architecture. 
[0005] Accordingly, ^ ^in a first aspect ef-the pr e s e nt invention provides a security 
svstem for facilitating transponder carrier identification and tracking within a secure area 
comprising: an RF transponder having a memorv in which is stored a unique identifier; 
the transponder including a transmitter to transmit the unique identifier: a transponder 
writer operable to send a replacement unique identifier to the transponder, the 
transponder replacing the identifier in the transponder memory with the replacement 
identifier; a transponder reader to receive from the transponder at least the unique 
identifier of the transponder; such that the transponder reader interrogates the transponder 
and, in response to the interrogation, receives from the transponder at least the unique 
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identifier of the transponder; wherein the location of the transponder is determined from 
the location of the transponder reader, 

a s e curity syst e m for facilitating transpond e r carri e r id e ntification and tracking within a 
secur e area comprising: an RF transponder having a m e mory in which is istorod a unique 
id e ntifi e r; and a transpond e r writ e r operable to s e nd a r e plac e m e nt unique identifier to th e 
transpond e r, the transpond e r replacing th e id e ntifi e r in th e transponder m e mory with th e 
replac e m e nt identifi e r. 

[0006] Advantageously, the transponder has a fixed unit identifier serving to identify the 

transponder, the fixed unit identifier being a separate identifier to the unique identifier. 

[0007] Preferably, the unique identifier comprises an identity code. 

[0008] Conveniently, the unique identifier is encrypted and assigned by a security 

processor. 

[0009] Advantageously, the transponder includes a transmitter to transmit the unique 
identifier. 

[0010] Preferably, the transmitter is a contactless transmitter operable to transmit RF 
signals. 

[001 1] Conveniently, the transmitter is a contact transmitter operable to send signals to a 
unit in contact with the transponder. 

[0012] Advantageously, the security system fiirther comprises a transponder reader to 

receive from the transponder at least the unique identifier of the transponder. 

[0013] Preferably, the transponder reader interrogates the transponder and, in response to 

the interrogation, receives fi-om the transponder at least the unique identifier of the 

transponder. 

[0014] Conveniently, the transponder reader is mounted within the secure area and has a 
location code which provides information as to the location of the transponder reader. 
[0015] Advantageously, the transponder reader is portable and operable within the secure 
area. 
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[0016] Preferably, the transponder reader has a predetermined interrogation range such 
that a transponder within the interrogation range will receive an interrogation signal from 
the reader and will respond thereto by sending its unique identifier. 
[0017] Conveniently, the security system further comprises a security processor having 
an access database setting out access parameters for the secure area and a carrier of a 
transponder, the security processor being operable to receive information from the 
transponder reader comprising at least the unique identifier of an interrogated transponder 
and the location of the transponder reader. 

[0018] Advantageously, the security processor determines from consultation of the access 
database whether the carrier is authoris e d authorized to be in the vicinity of the 
interrogating transponder reader and further determines what, if any, action needs to be 
taken. 

[0019] Preferably, the security system further comprises an actuator controllable by the 
security processor to effect operation of a device in response to a condition determined by 
the security processor. 

[0020] Conveniently, the device activated by the actuator is selected from the group 
consisting of: an image capture device; an alarm; an alert system; a lock; an emergency 
door release; a speaker; and a communication device. 

[0021] Advantageously, the transponder is configured as a card having a contact terminal. 
[0022] Preferably, a card reader/writer is provided having a contact region compatible 
with the card contact terminal, wherein the transponder is addressable by the card reader 
when the terminal and contact region are in contact with one another. 
[0023] Conveniently, the card reader/writer is operable to write the replacement unique 
identifier to the transponder. 

[0024] Advantageously, the card reader/writer is integrated with an identification 
authentication device so as to authenticate the identity of a carrier of the transponder prior 
to writing a replacement unique identifier to the transponder of the carrier. 
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[0025] Preferably, the carrier is selected from the group consisting of: personnel; a 
vehicle; and a hardware product. 

[0026] Conveniently, the unique identifier has an expiry time after which the unique 
identifier is no longer valid. 

[0027] Advantageously, the system is enabled by one of the following methods: Intemet 
enabled, wireless enabled, hardwired, intranet enabled and combinations thereof 
[0028] Anoth e r I n a second aspect ef-the pr e sent invention provides an RF transponder 
for use in a security system for faciUtating transponder carrier identification and tracking 
within a secure area comprising: a first memory in which is stored a replaceable unique 
identifier: and a transmitter operable to send the unique identifier in response to an 
interrogation signal from a transponder reader: wherein the location of the transponder is 
determined from the location of the transponder reader. 

a RE transpond e r for us e in a s e curity system for facilitating transponder carri e r 
id e ntification and tracking within a s e cur e ar e a compri s ing: a first m e mory in which is 
stor e d a replac e able uniqu e identifi e r; and a transmitt e r operabl e to send the uniqu e 
id e ntifi e r in r e spons e to an interrogation signal, 

[0029] A -In a third fa fthef-aspect ef-the pr e sent invention provides an RF transponder 
reader operable to send an interrogation signal to an RF transponder having a unique 
identifier and receive from the transponder, in response to the interrogation signal the 
unique identifier, the reader being operable to transmit the unique identifier to a security 
processor for identity verification wherein the location of the transponder is determined 
from the location of the transponder reader. 

a RF transpond e r r e ad e r op e rabl e to send an int e rrogation signal to an RF transponder 
having a unique identifi e r and rec e iv e from th e transpond e r, in response to the 
interrogation signal, the uniqu e id e ntifi e r, the read e r b e ing operable to transmit th e 
uniqu e id e ntifier to a s e curity processor for id e ntity verification. 
[0030] Preferably, the reader is a portable unit. 

[0031] Conveniently, the reader is integrated with a data archiving system. 
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[0032] Advantageously, the data archiving system is a personal digital assistant. 
[0033] Preferably, the reader incorporates a cellular telephone system. 
[0034] Anoth e r Li a fourth aspect ef-the pres e nt invention provides a method of identity 
verification comprising the steps of: interrogating an RF transponder with an 
interrogation signal firom a transponder reader: receiving a unique identifier firom the 
transponder provided in response to the interrogation signal; authenticating the identity of 
a user carrying the transponder; assigning a replacement unique identifier; and writing the 
replacement unique identifier to the transponder to replace the received unique identifier; 
locating the transponder from the location of the transponder reader. 
a m e thod of identity verification comprising the st e ps of: interrogating an RF transponder 
with an int e rrogation signal; r e c e iving a uniqu e id e ntifier fi-om th e transpond e r provid e d 
in respons e to th e int e rrogation signal; auth e nticating th e id e ntity of a us e r carrying th e 
transpond e r; assigning a r e plac e m e nt uniqu e identifier; and writing th e replac e ment 
unique id e ntifi e r to th e transpond e r to r e plac e th e r e c e ived uniqu e id e ntifi e r. 
[0035] hi order that the present invention may be more readily understood, embodiments 
thereof will now be described, by way of example, with reference to the accompanying 
drawings ^, in which: 

BRIEF DESCRIPTION OF DRAWINGS 
[0036] FIG. I is a schematic representation of a security system embodying the present 
invention; 

[0037] FIG. 2 is a block diagram of the architecture of an exemplary security system 
embodying the present invention; 

[0038] FIG. 3a is a block diagram of a transponder embodying the present invention; 
[0039] FIG. 3bA is a schematic plan view of the transponder of FIG. 3a; 
[0040] FIG. 4 is a block diagram of a transponder reader/writer, for use with the 
transponder of FIG. 3a; 

[0041] FIG. 5 is a block diagram of a portable transponder reader embodying the present 
invention for use with the transponder of FIG. 3a; 
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[0042] FIG. 6aA is a block diagram of a transponder reader embodying the present 
invention for use with the transponder of FIG. 3a; 

[0043] FIG. 6bB is a block diagram of the transponder reader of FIG. 6aA provided with 
an immediate recognition unit; 

[0044] FIG. 7 is flow diagram of one possible mode of operation of the security system 
embodying the present invention; 

[0045] FIG. 8 is a flow diagram of a mode of operation of a security system embodying 
the present invention; 

[0046] FIG. 9 is a flow diagram illustrating a mode of operation of the security system 
embodying the present invention; and 

[0047] FIG. 10 is a flow diagram illustrating operation of a hand-held transponder for use 
with a security system embodying the present invention. 

DESCRIPTION OF PREFERRED EMBODIMENT 
[0048] Referring to the drawings and, in particular, FIG. 1 , a security system embodying 
the present invention is described below in relation to a secure area 1 which is divided 
into a number of rooms or regions, to which authori se d authorized users 2 are allowed 
access. The nature of the access provided to users 2 is intended to be as flexible as 
possible, whilst at the same time, maintaining security to a required level. For clarity and 
convenience, reference numerals used throughout the following description have been 
applied consistently. Therefore, similar items used in different embodiment defined by 
different figures will be identified by similar reference numerals. 

[0049] A secure area 1 is provided with a plurality of transponder readers 3 each of which 
has a detection or interrogation range. It is intended that the number of blind spots, if any, 
is minimis e d minimized in the secure area so the coverage provided by the transponder 
readers 3 is substantially blanket coverage. Further or additional coverage is provided by 
means of additional transponder readers 4 at access points such as doors, gates and/or 
barriers and hand-held units carried by security personnel as shown in FIG. 1 . 
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[0050] A central monitoring means comprises a security processor 5 which includes 
amongst other items an access database 6 which sets out for respective users of the 
system the access parameters attributable to each user and also sets out the access 
authority for respective regions, rooms, or areas within the secure area. The security 
processor 5 also maintains a log of user locations so as to facilitate user tracking within 
the secure area 1. Further, the security processor incorporates an encryption/decryption 
algorithm. 

[0051] Typically, a "user" 2 refers to an individual person to whom a transponder 7 has 
been allocated Transponders 7 are radio frequency (RF) transponders, 7 and are shown 
in more detail in FIG. 3a. Although the illustrated transponder 7 is an active transponder 
7 having its own battery power, the use of passive transponders such as inductively 
coupled transponders is also envisaged Active transponders are preferred because of their 
superior transmission range compared to passive transponders. . 

[0052] Referring to FIG. 2, the block diagram shows an overall system architecture of the 
system components connected to a common bus 8. In particular, there is shown in 
communication with said bus 8, an I/O Logic Actuator 34, which may represent an alarm, 
silent alert svstem emergency door .etc, an image recording means 40 such as a 
' Vebcam*\ a security processor 5 and a means of monitoring stations 35, such as mimic 
boards, scanners etc. Further, the components in communication with the bus 8 include 
means of cards readers and writers integrated with other authentication techniques 28, 
means of card readers integrated with other authentication techniques 29 and means of 
handheld "radar like'' frequency detectors 33. Although the components are shown in 
FIG. 2 as being hard-wired, it is also possible for connection to the bus 8 to be effected 
by a wireless connection, intranet connection, Internet connection or the like. 
[0053] The basic components of the security system are as follows: 
[0054] RF transponders: As shown in FIG. ^3a, each RF transponder 7 is configured as a 
card upon which a micro^controller^ is mounted for executing a transponder control 
program held in a ROM 10 and being connected to a memory 1 1 storing a renewable 



AppNo. 10/046,042 

8 ' 

identification number referred to hereinafter as a unique identifier; and another memory 
or register 12 holding a fixed unit identifier number. Each transponder 7 is also provided 
with a transmitter 13 and receiver 14 connected to a built-in antenna 15. With reference 
to FIG 3b, fF urther connectivity to the transponder 7 is provided by a contact region 16 
on a surface of the card (s e e insert FIG. 3a) to facilitate conimunication with the 
transponder 7 when in contact with a contact card reader. The transponders are operable 
upon receipt of an interrogation signal fi*om a reader to transmit the unique identifier. 
[0055] The unique identifier held in the memory 1 1 comprises an encrypted idenfity code 
assigned to the transponder by the security processor. The transponder itself does not 
include any encryption/decryption functionality serving to simplify the transponder 
design All encryption/decryption functions are carried out by the security processor 5. 
The fixed unit identifier for each transponder 7 cannot be altered whereas the unique 
identifier held in the memory 1 1 of each transponder can be replaced/overwritten. 
[0056] Transponder Readers: Transponder readers 3 are implemented in a number of 
ways and can be provided with fiirther fimctionality. However, the most basic form of 
transponder reader is as shown in FIG. 6aA and comprises an antenna 17 for transmitting 
and receiving signals to/from the transponders 7 connected by an automatic switch 18 to 
respective transmitter 19 and receiver circuits 20 and then to a microprocessor 21 coupled 
to an oscillator 22 for transmitting received information firom the transponders 7 to the 
security processor 5. Preferably, the uplink to the security processor 5 is at a different 
fi*equency or uses a different communication standard to the link with the transponder 7 
hence the need for the local fi*equency oscillator 22. The simplest form of transponder 
reader 3 acts simply as an interrogator and relay. The transponder readers 3 periodically 
send an interrogation signal to all the transponders 7 within the range of the signal 
transmitted by the transponder reader 3 and receive signals generated by the transponders 
7 in response to receipt of the interrogation signal. The signal sent by the transponders 7 
comprises a unique identifier which is relayed, in its encrypted form if encrypted, to the 
security processor 5 . 
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[0057] The transponder readers 3 need not be wirelessly connected to the security 

processor but can also be hard-wired thereto over the bus 8. 

[0058] As previously stated, such simple transponder readers 3 interrogate transponders 7 
and relay identity codes of interrogated transponders to the security processor 5. 
[0059] Transponder Reader/ Writer: Transponder readers/writers 23 are slightly more 
complex Mm -than t ransponder readers 3 in that they also incorporate as their name 
would imply, a writing function, being able to communicate and send further information 
to the transponders 7. hi addition to Thev include the functionality shown for the 
transponder reader of FIG. 6a A, in that they include an antenna 17 for transmitting and 
receiving signals to/from the transponders 7 connected by an automatic switch 18 to 
respective transmitter 19 and receiver circuits 20. Further , the transponder readers/writers 
23, such as that shown in FIG. 4 are also able to send, in addition to an interrogation 
signal, a write signal to the transponders 7. The write signal is an encrypted unique 
identifier supplied to the reader/writer by the security processor 5. The encrypted unique 
identifier is written to the transponder memory 11 thereby overwriting the existing unique 
identifier in the memory 11. 

[0060] As shown in FIG. 4, the transponder reader/writer 23 can be further enhanced by 
the provision of one or more identification authentication devices 24 such as a keypad 25 
for a password entry; a biometric authenticator 26 such as a finger print reader or retinal 
scan each of which is connected to the reader/writer's central processing unit 21 for 
communication by the communication bus 8 or wireless connection to the security 
processor 5. 

[0061] In FIG. 4, the communication between the transponder 7 and the reader/writer 23 
is contactless. The reader/writer 23 can also be configured as a contact reader/writer such 
that the transponder 7 which is preferably configured as a card would be inserted into a 
slot provided in the reader/writer 23 to allow a contact region of the transponder card to 
be contacted by a terminal portion 4^32 of the reader/writer 23 so as to effect direct 
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contact communication with the card and read the transponder unique identifier and, if 
necessary, write a new replacement unique identifier to the transponder memory 11. 
[0062] Additionally, as shown in FIG. 4, an interactive display screen 27 may also be 
provided on the reader/writer. 

[0063] The above-mentioned transponder readers 3 and transponder reader/writers 23 are 
physically mounted around the secure area 1 and at various access points 30 (FIG. 2) . 
Each of the readers 3 and readers/writers 23 is provided with its own identifier so that 
when its information is transmitted to the security processor 5, the security processor can 
check on a look-up table or the like, the physical location of each reader 3 and 
reader/writer 23 as determined by its identifier. 

[0064] Combining the physical location of the reader 3 and/or readers/writers 23 with the 
unique identifier of a detected transponder 7 gives the security processor 5 a log of 
transponder location over a period of time. 

[0065] In order to offer further flexibility, the security system also provides portable 
transponder readers 3 1 and/or transponder readers/writers ^23 for use with a 
transponder 7 . An example of a portable transponder reader 3 1 is shown in FIG. 5. In . 
addition to the components required for a fixedly mounted transponder reade r, such as a 
microprocessor 21 and oscillator 22 . the portable reader 31 is provided with a cellular 
transniission reception capability to enable communication with the security processor. 
The cellular transmissions/reception capability also allows the portable reader to be used 
as a cellular telephone to communication with other portable readers or third parties. 
Preferably, the portable reader is provided with a rechargeable battery power source and 
an interactive touch screen display. 

[0066] The transponder reader of FIG. 6aA can be integrated with a motion detector such 
as a conventionally available infi'a red motion detector so that it is triggered to send an 
interrogation signal upon detection of movement within its detection zone so as to 
determine the identity of the user causing movement Clearly, if the moving object does 
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not have a transponder associated with it which is authoriGed authorized to be in that area, 
then an appropriate signal indicating this is sent to the security processor. 
[0067] The above discussion pre-supposes that a transponder is carried by each 
authoriG e d authorized user. However, transponders can also be carried by inanimate 
objects such as vehicles or portable devices such as expensive hardware. The transponder 
must be carried by the user at all time and visibly seen by the security personnel on duty. 
Each transponder stores, for sending upon receipt of an interrogation signal at least the 
encrypted unique identifier associated with the authoriG e d authorized user. In some 
embodiments, the transponder can send a combination of the unique identifier and the 
fixed unit identifier. 

[0068] A user carrying a transponder 7 with an authoriG e d authorized unique identifier is 
allowed to access certain areas and doors in accordance with predefined 
authoriGUtion authorization and/or access parameters held by the security processor 5. 
[0069] The authorisation authorization parameters shall include exact "start-work" and 
"stop-work" times of a user; a user authority level; a number of permissible entries of a 
user at a specific door or gantry; and a security procedure for gaining access to 
predetermined areas. An attempt to gain access outside these parameters will lead to an 
output fi'om the security processor to effect actuators to activate one or more of the 
following: alarms, "silent" alarms (for security personnel) and shutting and/or locking of 
doors and access points. At the end of a pre-defined working time, a transponder will 
automatically lose certain accesses to doors, gantries or areas. Accordingly, at the end of 
a day or at a pre-defined time, the unique identifier of a transponder will be completely 
disabled. Thus, an authoriGed authorized user is not allowed to stay within certain 
restricted zones or compound safeguarded by the security management system after 
his/her duty. 

[0070] To re-enter the sepure area, the user has to undergo a "check-in" process. 
[0071] During the "check-in" process at the security checkpoint (refer to FIG. 1), the 
user^s identity will be verified by the security personnel on duty. At the same time, the 
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user is required to insert his/her transponder card into a contact transponder reader/writer 
for the assignment of a new unique identifier assigned by the security processor and 
associated with the access parameters stored at the security processor. 
[0072] This new unique identifier allows the user to re-access the doors, gantries or area 
he/she is authoris e d authorized to and allows the user to perform his/her daily duty. 
[0073] Such an implementation of the security system drastically decreases the chang e s 
chances of intrusion with a stolen card, as well as blocking unauthoris e d unauthorized 
staff from entering restricted zones. Validity durations or expiry times of unique 
identifiers can be tailored to restricted zones by the authorisatio n authorization parameters 
held by the security processor but basically, the shorter the validity time of a unique 
identifier to a door, gantry or area, the more secure the restricted zone. 
[0074] Also, as shown in FIG 6b, a transponder reader similar to that shown in FIG 6a 
may include an immediate recognition unit, such t he image of the.entire "check-in" 
process for each transponder 7_is recorded by an image capture device 40 such as a CCD 
camera or the like, is transferred using the transponder reader and stored by the security 
processor in an archive. 

[0075] Next, in the compound safeguarded by the security management system, 
transponder readers are installed which have a predetermined detection or interrogation 
range. The role of the transponder readers is purely to receive the encrypted unique 
identifier and relay the same to the security processor for identity verification and to 
update a log of transponder location and movement. By not integrating a built-in security 
verification system in each transponder reader, like other conventional security systems, 
fabrication costs are reduced to a minimum. UUimately, this makes for an affordable 
security management system yet provided with blanket coverage. 
[0076] Besides, the compound is further patrolled by security personnel, who are each 
equipped with a portable transponder reader. Ideally, said portable transponder reader is 
integrated with an RF transponder reader/writer; cellular telephone system; and security 
data archiving. Preferably, the detection range is 5 metres or above. 
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[0077] Transponder readers are also provided at aeeesaccess points such as doors, 
integrated into the security management system. This is used to verify the unique 
identifier of a transponder at a door or a gantry. The reader sends the received unique 
identifier to the security processor for verification against the authorisation authorization 
parameters via a wireless communication system. 

[0078] The security management system allows security personnel to monitor and track 
the positions of all transponders within the secure area with reference to the reader 
identifiers and the transponder unique identifiers. 

[0079] The security processor is the central identity verification database, which provides 
related information and photographs of a transponder holder, a log of a transponder as 
well as the present location of a transponder. Also, it activates input/output actuators in 
response to the pre-defined authorisatio n authorization parameters. 
[0080] If an intruder is detected, instructions are transniitted to all portable transponder 
readers and the checkpoint(s). Also, information relating to the particular transponder and 
the holder thereof, such as last location detected by detecting mean, track records of the 
transponder, personal information of transponder holder and a snap-shot of transponder 
holder's image during the latest check-in, are enclosed to assist the patrolling security 
personnel in identifying the intruder. 

[0081] Furthermore, the particular unique identifier is immediately disabled and 
input/output logics for shutting doors are activated. 

[0082] FIG. 2 depicts an overview of security management system architecture. 
Examples of the present invention provide a unique security management system for 
authenticating and, tracking people as well as vehicles in public areas or high security 
zones. Public areas in the present context includes secure workplace environments, 
airports, banks, tourist spots, shopping mall, etc. Likewise, high security zones include 
miUtary bases and hazardous material storage areas. 

[0083] The system can be hardwired, Internet enabled, intranet enabled, wireless enabled 
or in any combination thereof 
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[0084] FIGS. 7, 8, 9 and 10 outline related process flows of the security management 
system. Said process flows are adequate for the major components in the system to carry 
out their roles as shown in FIGS. 1 and 2 and described in relation thereto. Therefore, it 
should not be Umited to the proposed process flows if additional components are 
integrated in the system. 

[0085] In FIG. 7, the process flow of detecting a transponder is shown. In the security 
management system, a detecting mean periodically transmits an interrogation signal. The 
interrogation signal is received by the transponders falling within range of the 
transponder reader. This prompts the transponder to transmit an encrypted unique 
identifier to the reader. 

[0086] Next, the reader receives the unique identifier and via the Internet, intranet or 
wireless communication, the detected unique identifier is then transferred to the security 
processor where the unique identifier is de-coded. It is subsequently verified against the 
identity database with respect to pre-defined authorisatio n authorization parameters. 
[0087] If a negative resuh is obtained, input/output signals will immediately be sent to 
activate emergency input/output logics of field sensors and if necessary, display records 
and give specific instructions to portable transponder readers. The particular unique 
identifier will be disabled and all subsequent movements of the particular transponder 
will be recorded. 

[0088] On the other hand, if a positive resuh is obtained, the tracking record or log of the 
particular unique identifier will be updated. Besides, an input/output signal will also be 
sent to update the monitoring means in the field. 

[0089] In FIG. 8, the process flow of an integrated motion detector and transponder 
reader is shown. The process flow is similar to FIG. 7 except that the device is in standby 
mode until activated by the motion detector identifying a moving object. 
[0090] In FIG. 9, the process flow of writing a new replacement unique identifier to the 
transponder is shown. To implement a better security procedure to a restricted zone, a 
unique identifier should ideally expirv -expire w ithin a specified. time. In this example, a 
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transponder can be programmed such that, its unique identifier will e^^pif^^ expire after 
one day (for example). The user is then required to renew or obtain a fresh identity 
number via a transponder reader and writer. 

[0091] By inserting a transponder card (for a contact reader/writer) or coming into close 
proximity with (for a contactless reader/writer) a reader/writer and subsequently 
performing siDme other means of identity verification procedure, such as biometric and 
password, the reader/writer will execute its verification procedures. If a negative result is 
obtained, the unique identifier will immediately be disabled and a security administrator 
will be activated. If a positive result is achieved, then this prompts the transfer of the read 
and encrypted unique identifier to the security management system via the Internet, 
intranet or wireless communication. Next, the unique identifier is decrypted and verified 
against the identity database with respect to pre-defined authorisatio n authorization 
parameters. 

[0092] If a negative result is obtained, input/output signals will immediately be sent to 
activate emergency input/output logics of field sensors, as well as give specific 
instruction to other handheld detectors. The particular unique identifier will be disabled 
and all subsequent movements of the particular transponder will be recorded. 
[0093] On the other hand, if a positive result is obtained, a new unique identifier will be 
generated by the security processor 5 and the identity and access databases will be 
updated. Following that, said new unique identifier will be encrypted by the security 
processor 5, transferred to the reader/writer 23 and written into the transponder memory 
1 1 in place of the previously stored unique identifier. 

[0094] For position tracking purpose, the tracking record of the particular unique 
identifier will be updated. An input/output signal will also be sent to update the 
monitoring means in the field. 

[0095] In FIG. 10, the process flow for a portable transponder reader is shown. The 
process flow is similar to that of a simple transponder reader. However, said detectings 
mean is a portable security unit. It is specially designed for security personnel to perform 
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random verification on the users within the restricted zone. This portable transponder 
reader has a built-in standard cellular telephone system for communications between 
handheld units and a central d e spatch dispatch station. 

[0096] hi the present specification "comprises" means "includes^ or consists of and 
"comprising" means "including ^ or consisting of . 

[0097] The features disclosed in the foregoing description, or the following claims, or the 
accompanying drawings, expressed in their specific forms or in terms of a means for 
performing the disclosed function, or a method or process for attaining the disclosed 
result, as appropriate, may, separately, or in any combination of such features, be 
utifee dutilized for realisin gr ealizing the invention in diverse forms thereof 
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Abstract 

A security system for facilitating transponder carrier identification and tracking within a 
secure area comprising an RF transponder having a memory in which is stored a unique 
identifier: the transponder including a transmitter to transmit the unique identifier: a 
transponder writer operable to send a replacement unique identifier to the transponder, 
the transponder replacing the identifier in the transponder meniory with the replacement 
identifier: a transponder reader to receive fi'om the transponder at least the unique 
identifier of the transponder: such that the transponder reader interrogates the transponder 
and, in response to the interrogation, receives fi-om the transponder at least the unique 
identifier of the transponder: wherein the location of the transponder is determined firom 
the location of the transponder reader. 

A s e curity syst e m for facilitating transpond e r carrier id e ntification and tracking within a 
secur e area comprising: an RF transponder having a m e mory in which is stor e d a uniqu e 
id e ntifier; and a transpond e r writer op e rabl e to send a r e plac e m e nt unique id e ntifi e r to the 
transpond e r, th e tran s pond e r r e placing th e id e ntifi e r in th e transpond e r m e mor>^ with the 
replacement identifi e r. Also disclos e d is an RF transpond e r for us e in a s e curity syst e m 
for facilitating transponder carri e r id e ntification and traclcing within a secur e ar e a 
comprising: a first m e mory in which is stor e d a r e plac e abl e uniqu e id e ntifi e r; and a 
transmitt e r op e rabl e to s e nd the uniqu e identifi e r in r e spons e to an int e rrogation signal. 
Also disclos e d is an RF transpond e r r e ader operable to s e nd an int e rrogation signal to an 
RF transpond e r having a uniqu e identifier and r e c e iv e from the transpond e r, in r e spons e 
to the int e rrogation signal, th e uniqu e id e ntifi e r, the r e ad e r b e ing op e rabl e to transmit the 
uniqu e id e ntifi e r to a s e curity proc e ssor for id e ntity v e rification. Also disclos e d is a 
m e thod of identity v e rification comprising th e steps of: int e rrogating an RF transpondei" 
with an int e rrogation signal; r e c e iving a uniqu e id e ntifi e r from th e transpond e r provid e d 
in response to th e int e rrogation signal; authenticating the id e ntity of a user carrying the 
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transpond e r; asBigning a r e plac e m e nt uniqu e id e ntifi e r; and writing th e replac e m e nt 
uniqu e identifi e r tQ th e transpond e r to r e plac e th e rec e ived uniqu e id e ntifi e r. 



